8 replies to this topic

[Colombo]

Ad-Aware Anniversary edition detected Trojan Win32Tr\.\per Delf. This quarantined. After restarting the computer I got the message that the application SPMgr.exe was not available. Missing MFC70U.dll.
What do I have to do? Computer starts slowly. thanks in advance for hopefully helping me out.

[LS CalamityJane]

Hi and thanks for posting.

This is a false detection that came out in the last update. it was reported here:
http://www.lavasofts...showtopic=26375

This will likely be fixed in our next update, but in the meantime, if you could post the ad-aware scan log as per the instructions here:
http://www.lavasofts...showtopic=18033
Then I'll be glad to review and advise but I do think that is the one being falsely detected.

(moving this thread to False Positives)

[LS Andy]

Hi everyone,

The Win32.Trojandropper.Delf detection was a false positive and has been fixed in update 0149.0008 - please update Ad-Aware to get the latest definition file.

Regards,

Andy
Lavasoft Malware Labs

[Beekeeper]

Hi, I received a malware notice today of the same thing

Win32Tr\.\perDelf

1st run said it deleted it: I closed and rebooted, ran Lavasoft a 2nd time - same message -so I quarantined it.

It usually takes 2 hours to do a full scan. My third scan took 3 hours and it came up with no malware message.

Went to the quarantine tab and deleted Win32Tr\.\perDelf from my C and D drive.

No other messages. I guess I'll do an update on the software, then reboot and run ONE more time to be sure.

So, from the 2nd post, (I'm a newbie here) This thing is just a false positive or is Jane refering to the 2nd message received about a missing file?

Unsure

[kardmania]

I stopped by after running a series of scans with the same issues, The update mechanism shows the program is updated and still reporting this issue.

I am uploading some logs for your perusal.

 Adaware_screenshot.gif   34.36K   0 downloads

Please let me know the staus of this issue when you have a chance.

Thanks

Edited by LS CalamityJane, 14 September 2009 - 02:48 PM.
Replaced .bmp attachment with .gif to reduce file size

[Colombo]

Thanks for the answers. I did restore the quarentined item, but it kept being recognized as highly dangerous until late last night an update of AAW AE came. When scanned again the trojan was not detected anymore.

[LS CalamityJane]

Hi Columbo,

Did you at any time attempt to "fix" the detection? Have you rebooted your computer? It would really help to see the scan log from those prior scans to see exactly what and where those files were and what the disposition of them was.

Here is instructions on how to find and post those logs
http://www.lavasofts...showtopic=18033

The update fixed the false detection but would not address any wrongly deleted files (if you did "fix"). If you ignored the detection you may not have any wrongly deleted files.

For the others of you have issues and questions, please post a NEW TOPIC so we can assist and review your situation. This is Columbo's thread and I can't address multiple users in his topic.

Use the instructions above that I gave to Columbo on how to find an post the scan logs but do put it in your own new topic (not this one)

[Fields]

Having the the same trouble as Columbo.
Ad-Aware Anniversary edition detected Trojan Win32Tr\.\per Delf. The file is deleted. After restarting the computer I got the message that the application SPMgr.exe was not available. Missing MFC70U.dll. How do I get my MFC0u.dll file back.

[LS CalamityJane]

Hi Fields, yes we can help with that and thank you for posting!

First I need to see your Ad-Aware scan log to make sure we replace the file in all locations (there may have been more than one). And please make sure that you rebooted/restarted your machine after "cleaning". If you did not do that then, please do it now.

And since this is Columbo's topic, I would ask you to start you own new topic here:
http://www.lavasofts...hp?showforum=93

And here is a guide for you on how to find and post that log:
Guide for posting false positives
http://www.lavasofts...showtopic=18033

And then one of us will guide you through restoring the file(s) deleted.